https://restofworld.org/2020/all-the-data-fit-to-sell/

The black market for data, as it exists online in India, resembles those for wholesale vegetables or smuggled goods. Customers are encouraged to buy in bulk, and the variety of what’s on offer is mind-boggling: There are databases about parents, cable customers, pregnant women, pizza eaters, mutual funds investors, and almost any niche group one can imagine. A typical database consists of a spreadsheet with row after row of names and key details: Sheila Gupta, 35, lives in Kolkata, runs a travel agency, and owns a BMW; Irfaan Khan, 52, lives in Greater Noida, and has a son who just applied to engineering college. The databases are usually updated every three months (the older one is, the less it is worth), and if you buy several at the same time, you’ll get a discount. Business is always brisk, and transactions are conducted quickly. No one will ask you for your name, let alone inquire why you want the phone numbers of five million people who have applied for bank loans.

https://zpravy.aktualne.cz/domaci/policiste-politici-i-jejich-rodina-cinsky-armadni-dodavatel/r~e3e18dfcf6c211ea842f0cc47ab5f122/

navrh architektury tabulkovej databazy, ktora z principu anonymizuje data, pricom stale sa nad nou daju robit analyzy. nieco podobne si spominam, ze robila nejaka doktorandka asi 5-10 rokov dozadu:
https://blogs.microsoft.com/on-the-issues/2020/06/24/differential-privacy-harvard-opendp/
https://github.com/opendifferentialprivacy/whitenoise-system

https://www.dataviper.io/blog/2019/pdl-data-exposure-billion-people/


Výskumníci našli na internete nezabezpečený Elasticsearch server, ktorý obsahoval 1.2 miliardy osobných údajov ako emailové adresy, LinkedIn či Facebook údaje.
https://www.kratkespravy.sk/2019/11/zo-sveta-it-bezpecnosti-11/

https://www.zdnet.com/article/autoclerk-database-leaked-customer-government-and-military-personal-records/

In a report shared with ZDNet, the researchers said the open Elasticsearch database was discovered through vpnMentor's web mapping project. It was possible to access the database, given it had no encryption or security barriers whatsoever, and perform searches to examine the records contained within. The team says that "thousands" of individuals were impacted, although due to ethical reasons it was not possible to examine every record in the leaking database to come up with a specific number. Hundreds of thousands of booking reservations for guests were available to view and data including full names, dates of birth, home addresses, phone numbers, dates and travel costs, some check-in times and room numbers, and masked credit card details were also exposed.

https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/

Medical images and health data belonging to millions of Americans, including X-rays, MRIs, and CT scans, are sitting unprotected on the Internet and available to anyone with basic computer expertise. The records cover more than 5 million patients in the United States and millions more around the world. In some cases, a snoop could use free software programs -- or just a typical Web browser -- to view the images and private data, an investigation by ProPublica and the German broadcaster Bayerischer Rundfunk found.

We identified 187 servers -- computers that are used to store and retrieve medical data -- in the U.S. that were unprotected by passwords or basic security precautions. The computer systems, from Florida to California, are used in doctors' offices, medical-imaging centers, and mobile X-ray services. The insecure servers we uncovered add to a growing list of medical records systems that have been compromised in recent years. Unlike some of the more infamous recent security breaches, in which hackers circumvented a company's cyber defenses, these records were often stored on servers that lacked the security precautions that long ago became standard for businesses and government agencies.
The exposed data varied depending on the health provider and the software they use. "For instance, the server of U.S. company MobilexUSA displayed the names of more than a million patients -- all by typing in a simple data query," reports ProPublica. "Their dates of birth, doctors, and procedures were also included."

"Another imaging system, tied to a physician in Los Angeles, allowed anyone on the Internet to see his patients' echocardiograms," the report adds. "All told, medical data from more than 16 million scans worldwide was available online, including names, birthdates, and, in some cases, Social Security numbers."

The authors of the report recommend you ask your health care provider or doctor if access to your images requires a login and password, and to ask if they conduct a regular security assessment as required by HIPAA.
https://arstechnica.com/information-technology/2019/09/millions-of-americans-medical-images-and-data-are-available-on-the-internet/

The personal records of most of Ecuador's population, including children, has been left exposed online due to a misconfigured database, ZDNet reported Monday. From the report:
The database, an Elasticsearch searver, was discovered two weeks ago by vpnMentor security researchers Noam Rotem and Ran Locar, who shared their findings exclusively with ZDNet. Together, we worked to analyze the leaking data, verify its authenticity, and contact the server owner. The leaky server is one of the, if not the biggest, data breaches in Ecuador's history, a small South American country with a population of 16.6 million citizens. The Elasticsearch server contained a total of approximately 20.8 million user records, a number larger than the country's total population count. The bigger number comes from duplicate records or older entries, containing the data of deceased persons.
https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/

pekny napad:


https://www.theguardian.com/world/2019/aug/13/the-fashion-line-designed-to-trick-surveillance-cameras

Kradeze toaletneho papiera vyriesili jeho vydavanim az po rozoznani tvare.
https://www.nytimes.com/2017/03/20/world/asia/china-toilet-paper-theft.html

https://www.zdnet.com/article/chinese-company-leaves-muslim-tracking-facial-recognition-database-exposed-online/

keby si niekto myslel, ze je to stale len koncept a nie realne nasadenie. tak tunak je trackovanie populacie cez IPTV kamery, okrem ineho. rozpoznavanie tvare v dave ludi. aktivne pokryta cca 3milionova mensina v krajine.
https://kyberia.sk/id/8598677

https://gizmodo.com/facebook-knows-how-to-track-you-using-the-dust-on-your-1821030620

prehlad niektorych zaujimavych sposobov ako si vytvorit metadata o ludoch.
https://kyberia.sk/id/8583864/

filter nenašiel ani nikde na kypči, ale práve som náhodne objavil na internetoch vecičku menom MyLife.com, ktorá funguje už cez 10 rokov, akurát vyzerá že iba v rámci USA - je to stránka, ktorá zbiera verejne dostupné údaje každého človeka, a na ich základe ho hodnotí hviezdičkami ako na imdb.
takže ak zadáš do googlu nejaké meno človeka z USA, ktorý nie je natoľko verejne exponovaný, toto je jeden z prvých výsledkov, ktoré ti vyhodí.
https://en.wikipedia.org/wiki/MyLife
https://medium.com/@tamaragane/how-to-remove-your-information-from-sites-like-mylife-77f89aff1aff
https://www.brighthub.com/internet/security-privacy/articles/110978.aspx



×÷ßßß$ˇ~[☼◙ş→☻ü84ó♀ÇüŮń§►♫☺♀♂ć☺<ˇ

From laboratory in far west, China's surveillance state spreads quietly
https://www.reuters.com/article/us-china-monitoring-insight/from-laboratory-in-far-west-chinas-surveillance-state-spreads-quietly-idUSKBN1KZ0R3

The scanners are hand-held or desktop devices that can break into smartphones and extract and analyze contact lists, photos, videos, social media posts and email.

Hand-held devices allow police to quickly check the content of phones on the street. Liu, the Beijing software developer, said the police were able to review his data on the spot. They apparently didn’t find anything objectionable as he was not detained.
--
In Shanghai, China’s gleaming international port city, two districts budgeted around 600,000 yuan each to purchase phone scanners and data-ripping tools. Beijing’s railway police budgeted a similar amount, the documents show.

“Right now, as I understand it, only two provinces in the whole country don’t use these,” said a sales representative at Zhongke Ronghui Security Technology Co Ltd, a Shaanxi-based firm that produces the XDH-5200A, one of the scanners detailed in several police procurement documents.

The representative said police stations across the whole country could consult a centralized repository of extracted data. “Almost every police station will have the equipment.”

A Surveillance State Unlike Any the World Has Ever Seen

In western China, Beijing is using the most modern means available to control its Uighur minority. Tens of thousands have disappeared into re-education camps. A journey to an eerily quiet region.
http://www.spiegel.de/international/world/china-s-xinjiang-province-a-surveillance-state-unlike-any-the-world-has-ever-seen-a-1220174.html

fórum o digitálnom Sauronovi : ako a prečo vznikol, ako sa vyvíja a ako a prečo nakoniec natrčí kopytá

The state of Illinois, which has six blockchain pilots underway, will partner with Utah-based Evernym for a birth registry pilot meant to individualize and secure identities... The endeavor, one of six distinct blockchain explorations Illinois began last summer with a working group, is expected to utilize the Sovrin Foundation's publicly available distributed identity ledger and expand upon accomplishments of the W3C Verifiable Claims Task Force, the state said... Recognizing that identity -- and, now, digital identity -- begin at birth, the state will explore using these technologies to create "a secure 'self-sovereign' identity for Illinois citizens during the birth registration process," it said in the announcement.

More from the Illinois Blockchain Initiative site:
Self-sovereign identity refers to a digital identity that remains entirely under the individual's control. A self-sovereign identity can be efficiently and securely validated by entities who require it, free from reliance on a centralized repository. Jennifer O'Rourke, Blockchain Business Liaison for the Illinois Blockchain Initiative commented, "To structurally address the many issues surrounding digital identity, we felt it was important to develop a framework that examines identity from its inception at child birth... Identity is not only foundational to nearly every government service, but is the basis for trust and legitimacy in the public sector."

In the proposed framework, government agencies will verify birth registration information and then cryptographically sign identity attributes such as legal name, date of birth, sex or blood type, creating what are called "verifiable claims" or attributes. Permission to view or share each of these government-verified claims is stored on the tamper-proof distributed ledger protocol in the form of a decentralized identifier... This minimizes the need for entities to establish, maintain and rely upon their own proprietary databases of identity information.

Evernym's "Chief Trust Officer" sees the program as "a major contribution to the larger effort of solving the online identity problem."
http://www.govtech.com/data/Illinois-Announces-Key-Partnership-in-Birth-Registry-Blockchain-Pilot.html

Facebook doesn't only know what its 2 billion users "Like." It now knows where 7.5 billion humans live, everywhere on earth, to within 15 feet. From a report:
The company has created a data map of the planet's entire human population by combining government census numbers with information it's obtained from space satellites, according to Janna Lewis, Facebook's head of strategic innovation partnerships and sourcing. The mapping technology, which Facebook says it developed itself, can pinpoint any man-made structures in any country on earth to a resolution of five meters. Facebook is using the data to understand the precise distribution of humans around the planet.
https://www.cnbc.com/2017/09/01/facebook-has-mapped-human-population-building-internet-in-space.html


topic trochu clickbait, v principe spravili rozpoznavanie obrazu - fotografii zeme zo satelitov, a vedia tam rozoznat clovek postavene veci vacsie ako 5 metrov.

https://arxiv.org/abs/1407.6981
Randomized Aggregatable Privacy-Preserving Ordinal Response, or RAPPOR, is a technology for crowdsourcing statistics from end-user client software, anonymously, with strong privacy guarantees. In short, RAPPORs allow the forest of client data to be studied, without permitting the possibility of looking at individual trees. By applying randomized response in a novel manner, RAPPOR provides the mechanisms for such collection as well as for efficient, high-utility analysis of the collected data. In particular, RAPPOR permits statistics to be collected on the population of client-side strings with strong privacy guarantees for each client, and without linkability of their reports. This paper describes and motivates RAPPOR, details its differential-privacy and utility guarantees, discusses its practical deployment and properties in the face of different attack models, and, finally, gives results of its application to both synthetic and real-world data.

ako rozumne celoplosne zbierat statisticke data od uzivatelov a pritom nevediet presne urcit, od koho to prislo, respektive co bolo obsahom od neho. firefox to chce teraz nasadit:


Mozilla preto použije techniku diferenciálnej ochrany súkromia. Pri týchto metódach sa dáta pred odoslaním spracujú tak, aby ich bolo možné hromadne analyzovať ale matematicky preukázateľne, do istej miery, neohrozovali súkromie jednotlivých užívateľov.

Spoločnosť konkrétne využije open source projekt Rappor od Google. Ten dáta pred odosielaním náhodne modifikuje tak, že modifikované dáta neumožňujú zistiť presné reportované dáta daného užívateľa.

Konkrétne k tomu používa najskôr tzv. Bloomov filter a následne dvojkrokové náhodné modifikovanie jednotlivých bitov zasielaných dát. Detailný technický popis Rappor je možné nájsť v článku Google.

Z počítača užívateľa tak odchádzajú dáta, ktoré neobsahujú priamo reportovanú hodnotu a túto úplne presne nie je možné z odosielaných dát ani zistiť.

Vzhľadom na spôsob akým sú dáta ale modifikované, pri štatistickom spracovaní zaslaných dát od mnohých užívateľov je možné zistiť štatistiky skutočných reportovaných dát veľkej skupiny užívateľov.

Táto metóda je tak lepšia ako zber dát bez snahy chrániť súkromie takýmto spôsobom. Reálna miera ochrany súkromia ale závisí na spôsobe a parametroch použitia tejto metódy, keď pri nevhodnom návrhu môže stále prezrádzať pomerne veľa. V minulom roku známy kryptológ Matthew Green napríklad upozorňoval, že metódy diferenciálnej ochrany súkromia zatiaľ neboli používané v reálnych produktoch, sú vždy kompromisom medzi presnosťou a ochranou súkromia a on zatiaľ nevidel takýto kompromis s dobrými výsledkami.

The data breach exposed the names, photos and home addresses of millions of Swedish citizen, including fighter pilots of Swedish air force, members of the military's most secretive units, police suspects, people under the witness relocation program, the weight capacity of all roads and bridges, and much more
https://thehackernews.com/2017/07/sweden-data-breach.html?m=1


mnam mnam mnam. kolko to malo gb?

http://eterni.me/

nejakym cudesnym sposobom chcu spravit vecneho avatara, alebo nejaky digitalny opis uzivatela. moze byt fajn. ja som uz dlho zvazoval nieco, ako doplnok do wikipedie, kde by sa spisal kratky zivotopis kazdeho cloveka, nech sa na neho nezabudne

Friday, March 31
World Backup Day 2017
http://www.worldbackupday.com/en/



THE WORLD BACKUP DAY PLEDGE

“I solemnly swear to backup my important documents and precious memories on March 31st.”

The House oversight committee claims the FBI's facial recognition database is out of control, noting that "no federal law controls this technology" and "no court decision limits it." At last week's House oversight committee hearing, politicians and privacy campaigners presented several "damning facts" about the databases. "About 80% of photos in the FBI's network are non-criminal entries, including pictures from driver's licenses and passports," reports The Guardian. "The algorithms used to identify matches are inaccurate about 15% of the time, and are most likely to misidentify black people than white people." From the report:
"Facial recognition technology is a powerful tool law enforcement can use to protect people, their property, our borders, and our nation," said the committee chair, Jason Chaffetz, adding that in the private sector it can be used to protect financial transactions and prevent fraud or identity theft. "But it can also be used by bad actors to harass or stalk individuals. It can be used in a way that chills free speech and free association by targeting people attending certain political meetings, protests, churches, or other types of places in the public." Furthermore, the rise of real-time face recognition technology that allows surveillance and body cameras to scan the faces of people walking down the street was, according to Chaffetz, "most concerning." "For those reasons and others, we must conduct proper oversight of this emerging technology," he said.

The European Union's top court ruled in May 2014 that people could ask search engines, such as Google or Microsoft's Bing, to remove inadequate or irrelevant information from the web results produced from searches for people's names. Today, the court is limiting the so-called "right to be forgotten" principle, ruling that individuals cannot demand that personal data be erased from company records in an official register. Reuters reports:
In Thursday's ruling the European Court of Justice said that company registers needed to be public to ensure legal certainty and to protect the interests of third parties. Company registers only contained a limited amount of personal information and, as executives in companies should disclose their identity and functions, it said. This did not constitute too severe an interference in their private lives and personal data. However, the court said there might be specific situations in which access to personal data in company registers could be limited, such as a long period after a company's dissolution. But this should be determined on a case-by-case bas

In a bid to get more Indians to have a birth certificate or any sort of ID card, India announced Aadhaar project in 2009. At the time, there were more Indians without these ID cards than those with. As a result of this, much of the government funding for the citizens were disappearing before they could see them. But according to several security experts, lawyers, politicians and journalists, the government is using poor security practices, and this is exposing the biometrics data -- photo, name, address, fingerprint, iris info -- of people at risk. More than 1.1 billion people -- and 99 percent of all adults -- in India have enrolled themselves to the system. From a report:
"There are two fundamental flaws in Aadhaar: it is poorly designed, and it is being poorly verified," Member of Parliament and privacy advocate, Rajeev Chandrasekhar told Mashable India. Another issue with Aadhaar is, Chandrasekhar explains, there is no firm legislation to safeguard the privacy and rights of the billion people who have enrolled into the system. There's little a person whose Aadhaar data has been compromised could do. [...] "Aadhaar is remote, covert, and non-consensual," he told Mashable India, adding the existence of a central database of any kind, but especially in the context of the Aadhaar, and at the scale it is working is appalling. Abraham said fingerprint and iris data of a person can be stolen with little effort -- a "gummy bear" which sells for a few cents, can store one's fingerprint, while a high-resolution camera can capture one's iris data.
The report goes on to say that the Indian government is also not telling how the data is being shared with private companies. Experts cited in the story have expressed concerns that those companies (some of which are run by people who were previously members of the team which designed the framework of Aadhaar) can store and create a parallel database of their own. On top of that, the government is making Aadhaar mandatory for availing several things including registration for nation-wide examinations, but in the beginning it promised Aadhaar will be used only to help poor get grocery at subsidized prices.

"Asi rok byl klid. V listopadu 2015 ohlásila radikálnější ze dvou kampaní za Brexit, „Leave.EU“, podporovaná Nigelem Faragem ze Strany za nezávislost Spojeného království (UKIP), že najala firmu zpracovávající big data, aby podpořila jejich online kampaň. Jednalo se o Cambridge Analytica. Hlavní přednost firmy: inovativní poltický marketing – tzv. microtargeting – měřením osobnostních rysů z digitálních stop, na základě psychometrických indikátorů.

Kosinskému začaly chodit e-maily s dotazy, co s tím má společného – slova Cambridge, osobnost a analýza v mnoha lidech ihned vyvolala vzpomínku právě na něj. Bylo to poprvé, co slyšel o této firmě, která si podle vlastních slov své jméno vypůjčila od svých prvních zaměstnanců, výzkumníků z univerzity v Cambridge. Zděšen se podíval na jejich webovou stránku. Byla jeho metodologie masově zneužita k politickým účelům?"

...

„Více méně každá zpráva, kterou Trump vydal, byla podložená daty,“ vzpomíná Alexander Nix. V den třetí prezidentské debaty mezi Trumpem a Clintonovou, Trumpův tým otestoval 175 tisíc různých variant reklam pro jeho argumenty, aby zjistil, jaké verze jsou nejlepší hlavně pro Facebook. Sdělení se lišila hlavně v naprosto mikroskopických detailech, aby cílila na příjemce optimálním psychologickým způsobem: jiné titulky, barvy, popisky, s fotkou nebo videem. Takto doladěná sdělení se dostanou i k nejmenším skupinám, vysvětlil nám Nix v rozhovoru. „Můžeme se cíleně zaměřit na vesnice, nebo bytové domy. I na jedince.“


http://a2larm.cz/2017/02/data-jez-obratila-svet-vzhuru-nohama/

corkovanie otlackov prsta z fotky.
https://phys.org/news/2017-01-japan-fingerprint-theft-peace.html#jCp


Could flashing the "peace" sign in photos lead to fingerprint data being stolen? Research by a team at Japan's National Institute of Informatics (NII) says so, raising alarm bells over the popular two-fingered pose. Fingerprint recognition technology is becoming widely available to verify identities, such as when logging on to smartphones, tablets and laptop computers. But the proliferation of mobile devices with high-quality cameras and social media sites where photographs can be easily posted is raising the risk of personal information being leaked, reports said. The NII researchers were able to copy fingerprints based on photos taken by a digital camera three meters (nine feet) away from the subject.

minule sme sa bavili o tetovani/pocarbani tvare nejakou kamuflazou, aby to jednak vyzeralo stylovo a jednak pomylilo algoritmy na rozpoznavanie tvare.

no tak v tomto pripade dokaze algoritmus uhadnut na 71%, o koho ide. aj ked je hlava rozmazana alebo inak retusovana:
https://yro.slashdot.org/story/16/09/15/0046228/none-of-your-pixelated-or-blurred-information-will-stay-safe-on-the-internet
https://arxiv.org/pdf/1607.08438v1.pdf

https://www.bloomberg.com/news/articles/2016-08-05/this-company-has-built-a-profile-on-every-american-adult

https://developers.slashdot.org/story/16/06/30/0255250/2-million-person-terror-database-leaked-online

A 2014 version of the World-Check database containing more than 2.2 million records of people with suspected terrorist, organized crime, and corruption links has been leaked online. The World-Check database is administered by Thomson-Reuters and is used by 4,500 institutions, 49 of the world's 50 largest banks and by over 300 government and intelligence agencies.

http://karpathy.github.io/2015/10/25/selfie/

na konci sa da spravit krasny retusator selficiek, napriklad:

Európa si pripomína Európsky deň na ochranu osobných údajov
http://www.teraz.sk/magazin/europa-si-pripomina-europsky-den-osobne-/178526-clanok.html